AppL No. 09/489,696 Atty. Ref. 81800.0018 

Amdt. Dated February 8 2005 Customer No. 26021 

Reply to Office Action of December 9, 2004 

Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims 
1-2. (Canceled) 

3. (Currently amended) A cryptographic communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
pieces of information resulting from division of information specifying each of the 
entities , the divided information used to generate the secret keys allowing 
diminished sizes of the secret keys ; one entity generates a first common key using a 
first component contained in at least one secret key generated by at least one of the 
plurality of centers, the secret key being peculiar to the one entity, encrypts 
plaintext to ciphertext using the first common key and sends the ciphertext to 
another entity, the first component corresponding to one or more of the divided 
pieces of information specifying said another entity; and said another entity 
generates a second common key identical to the first common key using a second 
component contained in secret keys peculiar to the another entity sent from said 
centers, and decrypts said ciphertext to the original plaintext using the second 
common key, the second component corresponding to one or more of the divided 
pieces of information specifying the one entity. 

4. (Currently amended) A cryptographic communications method for 
communicating information between entities wherein: 

secret keys peculiar to said entities are sent from a center to said entities; 

one entity encrypts plaintext to ciphertext using a first common key derived 
from a first secret key peculiar to the one entity sent from said center and sends the 
ciphertext to another entity; 

said another entity decrypts said ciphertext to the original plaintext using a 
second common key identical to the first common key, the second common key being 
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derived from a second secret key peculiar to said another entity sent from said 
center, characterized in that; 

a plurality of said centers are deployed; 

each of said plurality of centers generates secret keys peculiar to said entities 
by adding random numbers peculiar to said entities to divided pieces of information 
resulting from division of information specifying each of said entities, the divided 
information used to generate the secret keys allowing diminished siz es of the secret 
keys ; and 

each of said entities generates a common key using a component, contained 
in the secret key peculiar to that selfsame entity, corresponding to one or more of 
the divided pieces of information obtained from each of said plurality of centers 
which specify an opposite entity. 

5. (Original) The cryptographic communications method according to claim 4, 
wherein computation formulas for generating secret keys at said centers are as 
follows: 

S7T=g ailHl "" 3 (mo d P) 

Si 2=a i2 H 2 [T7T] (mod P-l) 
t 
i 
i 
i 

Si£ = oc iK U K [1^] (mod P-l) 
where 

vector Sij is a secret key corresponding to j ! th piece of divided information 
specifying entity i (j = 1, 2, K) 

[vector Iij] is j'th piece of divided information specifying entity i; 
P is a prime number; 

K is number of divisions in the information specifying entity i; 
g is primitive element for GF (P); 

Hj is a symmetrical 2 M x 2 M matrix made up of random numbers; 
M is size of divisions in the information specifying entity i; and 
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dij is. a personal secret random number for entity i (where cm ... cut = 1 (mod P- 

1))- 

6. (Original) The cryptographic communications method according to claim 5, 
wherein computation formulas for generating common keys at said entities are as 
follows: 

v = "q^ fT - ^-! S i2 t I m 2^ ' ■ S iK [ I ^1 
Aim — °i 1 "-I m i J 

= e ^7T r - r ^rH 1 ['i7r] cO -h k [TT] cT£j 

= g (mod P) 

where 

Kim is common key generated by one entity i for another entity m; and 
vector Sij [vector Iij] is a component contained in secret key vector Sij of entity 
i, corresponding to divided piece of information specifying entity m. 

7. (Currently amended) A common key generator provided at entities in a 
cryptographic communications system for generating common keys to be used in 
processing to encrypt plaintext into ciphertext and in processing to decrypt 
ciphertext into plaintext, comprising: 

storage means at each entity for storing secret keys peculiar to each 
respective entity produced for respective pieces of information resulting from 
division of information specifying each of said respective entities , the divided 
information used to generate the secret kevs allowing diminished sizes of the secret 
keys ; 

selection means for selecting components corresponding to pieces of 
information specifying opposite entities to be communicated with, from among the 

secret keys stored; and 

means for generating said common keys using said components so selected. 

8. (Currently Amended) A cryptographic communications system for 
reciprocally performing, between a plurality of entities, encrypting processing for 
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encrypting plaintext that is information to be sent into ciphertext and decrypting 
processing for decrypting ciphertext so sent back into original plaintext; comprising: 

a plurality of centers that generate secret keys peculiar to said entities using 
pieces of information resulting from division of information specifying each of said 
entities and that sends said secret keys to said entities , the divided information 
used to generate the secret kevs allowing diminished sizes of the secret keys ; and 

a plurality of entities each of which generates a common key employed 
mutually in said encryption and decryption processing when communicating with 
another entity, using a component corresponding to a divided specified information 
to each entity, contained in own secret key sent from the centers, the component 
further corresponding to one or more pieces of information specifying said another 
entity. 

9. (Currently amended) A computer readable recording medium that stores a 
program that generates at entities involved in communications common keys used 
in processing to encrypt plaintext to ciphertext and in processing to decrypt said 
ciphertext to said plaintext in a cryptographic communications system, comprising: 

first program code means for causing said computer to select a component 
corresponding to one or more of divided pieces of information specifying one entity 
from a secret key peculiar to another entity , the divided information allowing a 
diminished size of the secret key : and 

second program code means for causing said computer to generate said 
common keys using said components selected. 

10-12. (Canceled) 

13. (Currently amended) A cryptographic communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
specifying information resulting from division of information specifying each of the 
entities into a plurality of blocks , the divided information used to generate the 
secret keys allowing diminished sizes of the secret keys ; one entity generates a first 
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common key using a first component contained in secret keys peculiar to the one 
entity sent from the centers, encrypts plaintext to ciphertext using the first common 
key and sends the ciphertext to another entity, the first component corresponding to 
one or more of the divided pieces of information specifying said another entity; and 
said another entity generates a second common key identical to the first common 
key using a second component contained in secret keys peculiar to the another 
entity sent from said centers, and decrypts said ciphertext to the original plaintext 
using the second common key, the second component corresponding to one or more 
of the divided pieces of information specifying the one entity; secret keys for first 
block of divided specifying information have a multi-layer structure; and secret keys 
for remaining blocks of divided specifying information have a single-layer structure. 

14. (Currently amended) A secret key generation method for generating 
secret keys peculiar to entities using divided specifying information resulting from 
division of information specifying said entities into a plurality of blocks, the divided 
information used to generate the secret keys allowing diminished siz es of the secret 
keys , each entity generating a common key by using a component corresponding to 
the divided specifying information of another entity, wherein: 

computation formulas for generating said secret keys are as follows: 



SiK = aiHK[I iK 3 + 0 iK l 

gio=g ai 1 (mod N) 
Si i*=g a i~ T S n (mo d N) 



•^2 



~s7T=s a i T< S ii > (mod N) 
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(mod N) 



where 




«r T <s u > T 



(mod N) 



vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector Iij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2 M i x 2 M i matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

di is a personal secret random number for entity i (where gcd (cu, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

By is a personal secret random number for entity i (where Bn + Bi2 + ... + Bik = 



vector git is a secret key for 1st block of specifying information for entity i (t = 



T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, 
then the expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A = (a pv ) 

(ii) B = 0v) 

(iii) b pv = cV 

(iv) bpv = a^v 0 

15. (Currently amended) An encryption method wherein: 

secret keys peculiar to entities are generated using divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks , the divided information used to generate the secret keys 



X(N)); 



g is maximum generating element with modulo N; 



0, 1, 2, T); 
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allowing diminished sizes of the secret keys , each entity generating a common key 
by using a component corresponding to the divided specifying information of 
another entity; 

plaintext is encrypted to ciphertext at one entity using a common key 
generated using a component contained in the secret key peculiar to the one entity, 
the component corresponding to divided specifying information for another entity 
that is a destination of said ciphertext; and 

computation formulas for generating said secret keys peculiar to said entities 

are as follows: ^= ^ [T^] + 0 n T 

Si 2 = ffiH 2 [ I \ + & \ 2 1 



s^, = i u ] +a„ i 

i 

i 
i 

g i0 = g as 1 (mod N) 
gj *=g a T T s i i (mod N) 



"g7T=g a i T< S ii > (mod N) 

» 
i 
i 
i 

Si T=g a i~ T< S ii >l (mod N) 

i 
i 
i 

"iTT=g a i T< s i i > (mod N) 

where 

vector sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector Iij] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2 M J x 2 M J matrix made up of random numbers; 
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Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

di is a personal secret random number for entity i 

(where gcd (ai, A(N)) = 1 and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

8ij is a personal secret random number for entity i 

(where Bu + 6 i2 + ... + Bik = X (N)) ; 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of specifying information for entity i (t = 

0, 1, 2, T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A = (auv) 

(ii) B = (b pv ) 

(iii) bpv = c a l iv 

(iv) b^v = apv c 

16. (Original) The encryption method according to claim 15, wherein 
computation formulas for generating said common keys are as follows: 

50 i m 8 j o 

51 im=gS"l- t I m *] 

St im = S it C I mi] 
i 

i ^ ^ 

6Tim = 8 iT t I m i] 



x 2 i m~ s i2 t Im2] 
x j ( i m" S i j t I mj ] 
X K i m = S iK ^ 1^] 
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T 



= g a ~i T (x lim- t - t ' x kim ,T 

= g a "i T (a i H i cT iT ] . iO + "i i^+'ftpH O + B iK j 
= g fl "i T <a i H i"n ] cl S ci^] ) +j <n> ) T 

= g «:T fa.,« > ci^ cl^-h-^cT^] [1*3 >} T 



T 



= g MjCI^] ClS+ : -« K cT!5 ( mod N ) 



where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1, 2, .... T); 

xiim = vector so [vector I m i]; 

xjim (= vector Sij [vector I m] ]) is a component corresponding to vector I m j for 
entity m, selected from own vector Sij for j'th block of information specifying entity i 



Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-l) components Xjim (j = 2,3, K), that is, yim = X2im + X3im + ... 

+ XKim. 

17. (Currently amended) A cryptographic communications method for 
communications of information between entities, wherein 

a plurality of centers are deployed, each of which generates secret keys 
peculiar to said entities using divided specifying information resulting from division 
of information specifying each of said entities into a plurality of blocks , the divided 
information used to generate the secret keys allowing diminished sizes of the secret 
keys , and sends the secret keys to the entities respectively; 



(j = 2, 3, . 



K); 
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one entity generates a first common key using a first component contained in 
secret keys peculiar to the one entity sent from the centers, encrypts plaintext to 
ciphertext using the first common key, and sends the ciphertext to said another 
entity, the first component corresponding to divided specifying information for 
another entity; 

said another entity generates a second common key identical to the first 
common key using a second component contained in secret keys peculiar to said 
another entity sent from the centers, and decrypts said ciphertext using the second 
common key, the second component corresponding to divided specifying information 
for the one entity; and 

computation formulas for generating said secret keys at said centers are as 

follows: 

STt=a i H 2 [l~t] + 0 i2 T 



S^J=a i H j [I ij ] + 0 U 1 
SiK = a i H K [IiKl . + Bik 1 
g i0 = g ai 1 (mod N) 



"i7f= g a i T Si ! (mo d N) . 

i~T=g a i~ T< S ii > (mod N) 

i 

-g7^= g af T < S n > l (mod N) 



"g7^= g ar T< s i i > (mod N) 

where 

vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, .... K) 

[vector Iij] is j'th divided specifying information for entity i; 

Page 11 of 27 

\\\LA - 81800/0018 - 225003 vl 



Appl. No. 09/489,696 Atty. Ref. 81800.0018 

Amdt. Dated February 8 , 2 005 Customer No. 26021 

Reply to Office Action of December 9, 2004 

vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2 M i x 2 M i matrix made up of random numbers; 
Mj is size of j'th divided specifying information for entity i; 
K is number of block divisions in information specifying entity i; 
ai is a personal secret random number for entity i (where gcd (cu, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

8ij is a personal secret random number for entity i (where Bii .+ Bi2 + ... + BiK = 
X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1, 2, T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A=(a P y) ■ 

(ii) B = (b P y) 

(iii) b^y - c%y 

(iv) b^y = a^yc 

18. (Original) The cryptographic communications method according to claim 
17, wherein computation formulas for generating said common keys are as follows: 

50 i m" 8 iQ C I m i 3 

51 i m = S i i C I m i 3 

St im = Sit t I m i U 
■ 

St i m = 6 iT £ Iml^ 

x 2 i m = S i2 £ ^m2^ 
i 
i 

X j ( i m~~ S i j C I m j 3 
X K i m = S iK t- I mK^ 
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t c y cr-t) 

K im =n g T ty ' m 

1 m t=0 t im 

= K «i T f T CxV yT-t 
— © J t=0* 1 im im 

T 

= g«i T (x lim + - , - x kiirf 

= g a 1 T te i H 1 "iT ] "S +<J i l- t - t -«i H K CT iK ] ^ +fl i K> T 

s g a "i T {a i w "S3 + -'" t "H K ciJJ nj£] ) +i 99 ) T 

= g a i T fa i H i [7 iT ] c "53 ■»- + Hk"i5 > > T 

= g «,ciJ5 clS+-«HcaJ5 (mod N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector Imi for 
entity m, selected from own vector g it for 1st block of information specifying entity i 
(t = 0, 1, 2, T); 

xiim = vector su [vector I m i]; 

Xjim (= vector Sq [vector I m j]) is a component corresponding to vector I m j for 
entity m, selected from own vector sij for j'th block of information specifying entity i 
(j = 2, 3, ...,K); 

Kim is a common key generated by one entity i for another entity m; and 

y im is sum of (K-l) components xj im (j = 2, 3, K), that is, yim = x 2 im + xaim + ... 

+ XKim. 

19. (Currently amended) A common key generator provided at entities in a 
cryptographic communications system for generating a common key to be used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt ciphertext 
back to plaintext, comprising: 

storage means for storing secret keys peculiar to said entities produced, 
according to computation formulas given below, for divided specifying information 
resulting from division of information specifying each of said entities into a 
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plurality of blocks , the divided information used to generate the secret kevs 
allowing diminished sizes of the secret keys , each entity generating a common key 
by using a component corresponding to the divided specifying information of 
another entity; 

selection means for selecting components corresponding to divided specifying 
information for opposite entities to be communicated with, from the secret keys 
stored; and 

means for generating said common keys, according to computation formulas 
given below, using said components so selected: 



Si 



Si 



Si 



Si 



gi 



Si 



Hi 



Si 



= a i H 1 [I il ] + 0 ix 1 



aiH 2 [I i2 ] + 0 i2 1 



= a i H i [I ii ] + /3 U 1 



= a i H K [I iK ] + 0 iK 1 
= g a f T "f (mod N) 



= g a i TS ii (mod N) 



-►2 



= g a i T< - s i'i > (mod N) 
= g a f T< s i (mo d N) 



i~r=g<*i T< s u > (mod N) 



' i T 

where 

vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector Iij] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2 M i x 2 u i matrix made up of random numbers; 
Mj is size of j'th divided specifying information for entity i; 
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K is number of block divisions in information specifying entity i; 
di is a personal secret random number for entity i (where gcd (cu, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

By is a personal secret random number for entity i (where Bii + 6i2 + ... + 8ik = 
X (N)) ; 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1,2, ...,T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A = (a pv ) 

(ii) B = (M 

(iii) bpv = cV 

(iv) bpv = a^v 0 

50 i m = S io ^ I m i D 

51 i m = S i i C I ml ^ 
i 

i ^ 

St im = S it E Iml^ 
.i 
i 

i . ^ ^ 

St i m = S ix £ Irnl^ 

x 2 im = S i2 [ Im2^ 
i 

i ^ ^ 

x j ( i m""~ ® i j ^ I m j 3 

X K i m = S iK C I mK^ 

T c y CT-t) 

K im =n s t c ^™ 

Jm t=0 . t im 



— g i t=0T 1 im i 
= g a 1 T Cx lim + yim ) 



m 

T 
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s g a ! T (a i H i"n ] "iS + *i WTi5 ."i3e> +fi iK^ T 

= g a "i T {a i « i"!T ] c"25 "2o> > +^ . <n) > T 

= g «,cTf5 c W C]> T (mo d N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1,2, T); 

xiim = vector su [vector I m i]; 

xji m (= vector sy [vector I m j]) is a component corresponding to vector I m j for 
entity m, selected from own vector 8q for j'th block of information specifying entity i 
(j = 2, 3, ...,K); 

Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-l) components Xjim (j = 2, 3, K), that is, yim = X2im + X3im + ... 

+ XKim. 

20. (Currently amended) A cryptographic communications system for 
reciprocally performing, between a plurality of entities, encryption processing for 
encrypting plaintext that is information to be sent into ciphertext and decryption 
processing for decrypting ciphertext so sent back into original plaintext, comprising: 

a plurality of centers each of which generates secret keys peculiar to said 
entities, according to computation formulas given below, using divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks , the divided information use d to generate the secret keys 
allowing di minished sizes of the secret keys , and sends said secret keys to said 
entities; and 

a plurality of entities each of which generates a common key mutually 
employed in said encryption and decryption processing when communicating with 
another entity, according to computation formulas given below, using a component 
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contained in own secret key sent from said centers, the component corresponding to 
divided specifying information for said another entity: 

STT=a i H 1 [TT] + 0 n T 

"s7T=aiH 2 cTit] +0 i2 T 

i 

i 

i 
i 

-S^=afl K [T^] + 0 iK T 
"i7£"=g«f T ~f (mod N) 



gj , =g a \ s i i (mod N) 
~^t= g a i" T< s i > > (mod N) 



g 



7f= g «," T< Sj , > l (mod N) 



where iTT- ^ < S s , > T (mo d N) 

vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector Iij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2 M > x 2 M i matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

di is a personal secret random number for entity i (where gcd (cu, A(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

Bij is a personal secret random number for entity i (where Bii + 6i2 + ... + BiK = 
A(N)); ■ 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1,2, ...,T); 
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T is degree of exponent portion; and 



if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A = ( a^v) 

(ii) B = 0v) 

(iii) bnv= cV 

(iv) bnv = a pv c 

Bo im =g so n m i3 

Si im = 6 il t 

I 
I 

St i m = S j t E I ml ^ 
i 



St i m 



" S jT C I ml ] 




A j ( i m a i i L i mj J 
■ 

x Kim = s iK t Ij^] 





= K «: T z: ftT cx i t : y. T - 1 

— © i t=0T 1 im ltn 
T 

= g a "i T klim+W 
= g a ~i T ^lim^ ^kim* 

= g «1 T fa j « jiiJS O ^-^"i* 1 <0> «* > T 
= g « i"?5 "3 ■ t - + H K cT^ [1^] ) T (m 0 d N) 



where 
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gtim (= vector git [vector I m i]) is a component corresponding to vector I m i for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1,2, ...,T); 

xiim = vector su [vector I m i]; 

Xjim (= vector sy [vector I m j]) is a component corresponding to vector I m j for 
entity m, selected from own vector sy for j'th block of information specifying entity i 
0 = 2, 3.....K); 

Kim is a common key generated by one entity i for another entity m; and 

y im is sum of (K-l) components Xj im (j = 2, 3, K), that is, y im = x 2 im + x 3 im + ... 

+ XKim- 

21. (Currently amended) A computer readable recording medium for storing a 
program that generates at entities involved in communications a common key 
mutually used in processing to encrypt plaintext to ciphertext and in processing to 
decrypt said ciphertext back to said plaintext in a cryptographic communications 
system, comprising: 

first program code means for causing said computer to select a component 
corresponding to divided specifying information of one entity that is a ciphertext 
recipient from a secret key peculiar to another entity that is a ciphertext sender, 
according to computation formulas given below, for each of divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks , the divided information al lowing a diminished size of the 
secret key : and 

second program code means for causing said computer to generate said 
common key, according to computation formulas given below, using said 
components selected: 

S7T=a } H l ["nT] + /3 n T 

■ I * 

I 

I 
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srT= aft [T*] +B U ~T 



"i^ss*!^ (mod N) 
"g~^=g a f TS i i (mod N) 

► 2 

a f T< s n > (mod N) 



Si 2 — 6 



•g7^=g a i T< s ii > (mo d N) 

i 

i 

i ' ^ 

"i^Tsg a r T< s i i > (mod N) 
where 

vector Sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector Iij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2 M J x 2 M i matrix made up of random numbers; 

Mj is size of j f th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

di is a personal secret random number for entity i (where gcd (cu, X(N)) = 1 
and X ( • ) is Carmichael function); 

N is such that N = PQ (where P and Q are prime); 

6ij is a personal secret random number for entity i (where Bu + 6i2 + ... + 8iK = 
X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 

1, 2, T); 

T is degree of exponent portion; and 
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if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A = (anv) 

(ii) B = (b P v) 

(iii) b^v = cV 

(iv) b P v = a^v 0 

50 i m = 8 io C Imll 

51 i m = 8 j i C I m i] 
St ( i 8 i t t I m il 

x 2 i m = S i2 C I m2 ] 



^j ( im S jj [I m j] 
i 

^ ■ ^ 

X K i m = S jK t ImK^ 

t c v cr-t) 

k =n b t 1 im 

— 8 • t=0T 1 im im 
= g a 1 T <*lim + *im> 

sg«'| r ««iiin+:+Xkiirf T 

= g fl "i T (a i w i cT n 3 -»"" *-"K"i5 5!& ) +■» <n> ) T 
= g «~j T <« i « jiiJJ [Ij +-«i K ciJ5 cij] ) > T 

= g C^-^ CW]) T (mod N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0, 1, 2,..., T); 
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xiim = vector sa [vector I m i]; 

X j im (= vector sy [vector I m j]) is a component corresponding to vector I m j for 
entity m, selected from own vector Sij for j'th block of information specifying entity i 
(j = 2,3,...,K); 

Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-l) components Xji m (j = 2, 3, K), that is, yi m = X2im + X3im + ... 

+ XKim- 

22. (Currently Amended) A computer data signal embodied in a carrier wave 
for generating at entities involved in communications common keys used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt said 
ciphertext to said plaintext in a cryptographic communications system, comprising: 

first code segment for causing a computer to select a component 
corresponding to one or more of divided pieces of information specifying one entity 
from a secret key peculiar to another entity , the divided information allowing a 
diminished size of the secret key ; and 

second code segment for causing said computer to generate said common keys 
using said components selected, wherein said computer generates said common 
keys by using a component corresponding to the divided specifying information of 
another computer. 

23. (Currently Amended) A computer data signal embodied in a carrier wave 
for generating at entities involved in communications a common key mutually used 
in processing to encrypt plaintext to ciphertext and in processing to decrypt said 
ciphertext back to said plaintext in a cryptographic communications system, 
comprising: 

first code segment for causing a computer to select a component 
corresponding to divided specifying information of one entity that is a ciphertext 
recipient from a secret key peculiar to another entity that is a ciphertext sender, 
according to computation formulas given below, for each of divided specifying 
information resulting from division of information specifying each of said entities 
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into a plurality of blocks , the divided information allowing a diminished size of the 
secret key : and 

second code segment for causing said computer to generate said common key, 
according to computation formulas given below, wherein said computer generates 
said common keys by using a component corresponding to the divided specifying 
information of another computer, using said components selected: 

• S7T=a i H j CT7] +0 U T 

i 

S7T=a i H K Cl iK ] + B iK 1 

gio =g a i~ T ~^ (mod N) 
gi r= e a i~ T S i i (mod N) 
Si2 =g a i~ T< s i i > (mod N) 

i 

! ► 

gi r = s a i~ T< S i i > (mod N) 

i 

gi-T=g a i" T< S i i > (mo d N) 
where 

vector sij is a secret key corresponding to j'th divided specifying information 
for entity i (j = 1, 2, K) 

[vector Iij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2 M J x 2 M i matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

cti is a personal secret random number for entity i (where gcd (cu, X(N)) = 1 
and X ( • ) is Carmichael function); 
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N is such that N = PQ (where P and Q are prime); 

By is a personal secret random number for entity i (where 6ii + 6i2 + ... + Bik = 
A (N)) ; 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i (t = 0, 
1, 2, T); 

T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) below, the 
expressions B = c A and B = <A> C represent (iii) and (iv) below, respectively. 

(i) A=(a pv ) 

(ii) B = 0v) 

(iii) b pv = cV 

(iv) bpv = auv c 

Si i m = 6 j i C I m i] 
i 

St i m = 6 j t t I m i] 
i 

St i m = 6 iT t I mi ] 

x 2 im~ s i2 C I m 23 

x j ( i m"~ S i j t I m j 3 
i 

i 1 ^ ^ 

X K i m~ s iK t 1,^] 

T c y CT-t) 

K im =n s T i lm 

im t=0 tim 

T * ,T-t 



m 



= g a i T <*1 im^Im*" 
= g a ~i T ^lim- 1 — •""kirn 1 

= g a "i T (B i H i cT iT ] O + *i l 4 — , " c i H K cT m ] c ^ ]+fl iK>' 1 
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_ g «"i T i« i « jO^l ClJ ^H^TJ] Cl^] ) +; <N) } T 

= g «,«75 iC^'+k k u$ ^]) T (mod N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i for 
entity m, selected from own vector git for 1st block of information specifying entity i 
(t = 0,l,2, ...,T); 

xiim = vector su [vector Imi]; 

Xjim (= vector Sij [vector I m j]) is a component corresponding to vector I mj for 
entity m, selected from own vector Sij for j f th block of information specifying entity i 
(j = 2,3,.-:,K); 

Kim is a common key generated by one entity i for another entity m; and 

yim is sum of (K-l) components xji m (j = 2, 3, K), that is, yim = X2im + X3im + ... 

+ XKim- 
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